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In re Zurko 
U.S. Court of Appeals Federal Circuit 
No. 96-1258 
Decided August 2, 2001 j 

PATENTS 

[1] Patentability/Validity - Obviousness « 
Combining references (§ 115.0905) 

JUDICIAL PRACTICE AND PROCEDURE 
Procedure — Judicial review -- Standard of 
review -Patents (§ 410.4607.09) 

Decision of Board of Patent Appeals and 
Interferences sustaining obviousness rejection of 
patent application for method of improving security 
in computer system is reversed, even though board's 
factual findings underlying its determination are 
reviewed under "substantial evidence" standard, 
since prior art references relied upon by board do 
not teach limitation requiring communications 
between user and "trusted" environment along 
"trusted" path, and since deficiencies of references 
cannot be remedied by reliance upon additional 
combination of alternative references cited for first 
time on appeal, or by board's general conclusion, 
unsupported by evidence in record, that requiring 
communication with trusted environment over 
trusted path would be "basic knowledge" or 
"common sense" to person of ordinary skill in art; 
although board's expertise alone may provide 
sufficient support for conclusions as to peripheral 
issues, its core factual findings in patentability 
determinations must be supported by concrete 
evidence in record. 

On remand from the U.S. Supreme Court. 

Patent application of Mary E. Zurko, Thomas A. 
Casey Jr., Morie Gasser, Judith S. Hall, Clifford E. 



Kahn, Andrew H. Mason, Paul D. Sawyer, Leslie R. 
Kendall, and Steven B. Lipner, serial no. 
07/479,666 (method for improving security in a 
computer system). Board of Patent Appeals and 
Interferences sustained examiner's rejection of 
application under 35 U.S.C § 103. The U.S. Court 
of Appeals *1694 for the Federal Circuit reversed 
on appeal ( 42 USPQ2d 1476). On rehearing en 
banc, the Federal Circuit held ( 46 USPQ2d 1691) 
that proper standard of review for fact findings 
underlying patentability determinations by Patent 
and Trademark Office is "clearly erroneous" 
standard, rather than more deferential standard 
found in Administrative Procedure Act. The U.S. 
Supreme Court reversed the Federal Circuit's en 
banc decision and remanded, holding ( 50 USPQ2d 
1930) that PTO's findings of fact must be reviewed 
under either "substantial evidence" or "arbitrary and 
capricious" APA standards of review. On remand, 
the Federal Circuit again reverses board's decision. 

Linda Moneys Isacson, associate solicitor, John 
M. Whealan, solicitor, and Kenneth R. Corsello and 
Thomas J. Finn, associate solicitors, U.S. Patent 
and Trademark Office, Arlington, Va., for 
Commissioner of Patents and Trademarks. 

John F. Sweeney, Michael O. Cummings, Jon T. 
Hohenthaner, Israel Blum, Steven F. Meyer, and 
Brenda Pomerance, of Morgan & Finnegan, New 
York, N.Y.; Irene Kosturakis and Russell T. Wong, 
of Compaq Computer Corp., Houston, Texas; 
Ernest Gellhorn, Washington, D.C.; Janice M. 
Mueller, of Suffolk University Law School, Boston 
Mass.; Ronald C. Hudgens, of Digital Equipment 
Corp., Maynard, Mass., for Mary E. Zurko et al. 

Before Newman, circuit judge, Archer, senior 
circuit judge, and Michel, circuit judge. 

Archer, S.J. 

This case is before us on remand from the 
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Supreme Court of the United States. Dickinson v. 
Zurko, 527 U.S. 150, 50 USPQ2d 1930 (1999) (" 
Zurko HI"). In Zurko III, the Court reversed our 
judgment and remanded the case because we had 
reviewed the factual findings of the Board of Patent 
Appeals and Interferences ("Board") for clear error, 
an incorrect standard of review. 

The Board decision at issue, Ex parte Zurko, No. 
94-3967 (Bd. Pat. Apps. & Int. Aug. 4, 1995), 
sustained the rejection of U.S. Patent Application 
No. 07/479,666 ("the *666 application") under 35 
U.S.C. § 103 (1994). In our initial review of this 
decision, we determined that the Board's findings 
were clearly erroneous and we reversed. In re Zurko 
,111 F.3d 887, 42 USPQ2d 1476 (Fed. Cir. 1997) 
(" Zurko /"). At the Commissioner's suggestion, we 
then reheard this case en banc to reconsider the 
question of the appropriate standard of review. The 
Commissioner argued that Board findings should be 
reviewed under the standards of the Administrative 
Procedure Act (APA), namely the substantial 
evidence or arbitrary and capricious standard. 5 
U.S.C. § 706 (1994). The en banc court held, 
however, that clear error was the correct standard of 
review for Board findings of fact and adopted the 
conclusions of the original panel decision. In re 
Zurko, 142 F.3d 1447, 46 USPQ2d 1691 (Fed. Cir. 
1998) Zurko //"). 

The Commissioner then petitioned for review by 
the Supreme Court, and the Court reversed, holding 
that Board findings of fact must be reviewed under 
the APA standards of review. The Court did not 
specify which APA standard of review to apply, 
substantial evidence or arbitrary and capricious. We 
subsequently decided this question in In re Gartside 
, 203 F.3d 1305, 53 USPQ2d 1769 (Fed. Cir. 2000) 
, and held that substantial evidence is the correct 
APA standard of review for Board factual findings. 

We now revisit the merits of our decision in Zurko 
/, applying the proper APA standard of review. In 
doing so, we conclude that the outcome of this case 
does not change with the application of this new 
standard of review. Because the factual findings 
underlying the Board's decision are not supported 
by substantial evidence, we reverse. 



BACKGROUND 
The '666 application concerns a method for more 
efficiently creating a secure computer environment. 
Secure, or "trusted," computer environments 
employ trusted software designed to preclude 
unauthorized users and to prevent unintended or 
unauthorized commands. Such trusted software is 
often quite costly, compared to untrusted software, 
so it is desirable to minimize the amount of trusted 
software in the system. Applicants claim a method 
for processing trusted commands with a minimum 
of trusted software. 

Representative claim one reads as follows: 

1. A machine-executed method for executing a 
trusted command issued by a user on a computer 
system, the computer system including an untrusted 
computing environment and a trusted computing 
environment, said method comprising the steps of: 

*1695 (a) parsing the trusted command in the 
untrusted computing environment to generate a 
parsed command; 

(b) submitting the parsed command to the trusted 
computing environment; 

(c) displaying a representation of the trusted 
command to the user through a trusted path; 

(d) receiving a signal from the user through a 
trusted path signifying whether the displayed 
representation accurately represents the user's 
intentions; 

(e) if the signal signifies that the displayed 
representation does not accurately represent the 
user's intentions, then preventing the execution of 
the parsed command; 

(f) if the signal signifies that the displayed 
representation accurately represents the users 
intentions, executing the parsed command in the 
trusted environment. 

As set forth in claim one, applicants' method 
involves processing and verifying a trusted 
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command using both trusted and untrusted software. 
A trusted command is first processed by untrusted 
software to create a parsed command. The parsed 
command is then submitted to the trusted computer 
environment. Execution of this command requires 
verification along a trusted path. The parsed 
command is relayed to the user along a trusted path, 
and, if correct, the user can send a confirming signal 
back along this trusted path, allowing execution of 
the command. By processing a trusted command in 
this manner, the applicants contend they reduce the 
amount of trusted software. The applicants assert 
that the parsing step generally requires a large 
amount of software and that performing this step 
with untrusted software greatly reduces the amount 
of trusted code required to process a trusted 
command. 

The Board sustained the Examiner's rejection of 
claims 1, 4, and 5 of the '666 application under 35 
U.S.C. § 103 based on two prior art references. The 
primary reference is the UNIX operating system, as 
described in the applicants' information disclosure 
statement ("IDS"). According to this description, 
the UNIX system employs both untrusted and 
trusted code. Furthermore, certain commands in a 
UNIX system may be parsed in an untrusted 
environment, and then these parsed commands may 
be executed by "calling a trusted service that 
executes in a trusted computing environment." 

The secondary reference, also described in 
applicants' IDS, is Dunford, FILER Version 2.20 
("FILER2"). This program repeats back potentially 
dangerous commands, requesting confirmation from 
the user before execution. 

Considering the teachings of these two references, 
the Board concluded that the invention claimed by 
the '666 application would have been obvious. The 
Board commented that "the artisan would have been 
led from these teachings to take the trusted 
command parsed in an untrusted environment and 
submitted to the trusted computing environment, as 
taught by UNIX, and to display the parsed 
command to the user for confirmation prior to 
execution, as suggested by [FILER2]." Ex parte 
Zurko, slip op. at 6-7. According to the Board, this 



combination would render the claimed invention 
obvious. 

The Board also responded to applicants' arguments 
that neither reference discloses a trusted path 
communication to the user and that no teaching of 
the prior art references motivates the combination 
of these references to create the claimed invention. 
The Board said that communication along a trusted 
path, if not explicit in the prior art, is either inherent 
or implicit. Id. at 7. The Board further adopted the 
Examiner's assertion that "it is basic knowledge that 
communication in trusted environments is 
performed over trusted paths." Id. at 8. As for the 
motivation to combine these references, the Board 
concluded that it "would have been nothing more 
than good common sense" to combine the teachings 
of these references. Id. The Board noted that 
FILER2 taught the verification of dangerous 
commands in general, suggesting verification of the 
parsed command submitted to the trusted computing 
environment in UNIX. Because this verification 
occurs within a trusted environment, it is "basic 
knowledge," according to the Board, that this 
verification would occur along a trusted path. Id. at 
7-8. 

Reviewing the Board's decision in Zurko /, we 
held that "the Board's finding that the prior art 
teaches, either explicitly or inherently, the step of 
obtaining confirmation over a trusted pathway [was] 
clearly erroneous." Zurko /, 111 F.3d at 889, 42 
USPQ2d at 1478. Indeed, we noted that neither 
reference relied upon by the Board taught 
communication with *1696 the user over a trusted 
pathway. Id., 42 USPQ2d at 1479. We further held 
that the Board clearly erred in finding that the prior 
art teaches communicating with the user over both a 
trusted and an untrusted path. This finding was in 
conflict with the Board's other finding that trusted 
communications must be over trusted paths. Id. at 
890, 42 USPQ2d at 1479. 

On remand, applicants urge that we maintain our 
reversal of the Board's decision, arguing that the 
decision is legally flawed, or, alternatively, that the 
Board's factual findings fail under the APA standard 
of review. The Commissioner reponds that we must 
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affirm the Board decision because its findings are 
supported by substantial evidence in the record. 

DISCUSSION 
A claimed invention is unpatentable for 
obviousness if the differences between it and the 
prior art "are such that the subject matter as a whole 
would have been obvious at the time the invention 
was made to a person having ordinary skill in the 
art." 35 U.S.C. § 103(a) (1994); Graham v. John 
Deere Co., 383 U.S. 1, 14, 148 USPQ 459, 465 
(1966). Obviousness is a legal question based on 
underlying factual determinations including: (1) the 
scope and content of the prior art, including what 
that prior art teaches explicitly and inherently; (2) 
the level of ordinary skill in the prior art; (3) the 
differences between the claimed invention and the 
prior art; and (4) objective evidence of 
nonobviousness. Graham, 383 U.S: at 17-18, 148 
USPQ at 467; In re Dembiczak, 175 F.3d 994, 998, 
50 USPQ 1614, 1616 (Fed. Cir. 1999); In re Napier 
, 55 F.3d 610, 613, 34 USPQ2d 1782, 1784 (Fed. 
Cir. 1995) (stating that the inherent teachings of a 
prior art reference is a question of fact). We review 
the ultimate legal determination of obviousness 
without deference. In re Dembiczak, 175 F.3d at 
998, 50 USPQ at 1616. We review factual findings 
underlying this determination for substantial 
evidence. In re Gartside, 203 F.3d at 1311-16, 53 
USPQ2d at 1772-75. 

Substantial evidence is "such relevant evidence as 
a reasonable mind might accept as adequate to 
support a conclusion." Consol Edison Co. v. NLRB, 
305 U.S. 197, 229 (1938); see also Zurko III, 527 
U.S. at 162, 50 USPQ2d at 1772-75. A review 
under this standard "involves an examination of the 
record as a whole, taking into consideration 
evidence that both justifies and detracts from the 
agency's decision." In re Gartside, 203 F.3d at 
1312, 53 USPQ2d at 1773 (citing Universal 
Camera Corp. v. NLRB, 340 U.S. 474, 487-88 
(1951)). In addition, "the possibility of drawing two 
inconsistent conclusions from the evidence does not 
prevent an administrative agency's finding from 
being supported by substantial evidence." Consolo 
v. Fed. Maritime Comm'n, 383 U.S. 607, 619-20 
(1966). 



The substantial evidence standard has been 
analogized to the review of jury findings, and it is 
generally considered to be more deferential than the 
clearly erroneous standard of review. Zurko III, 527 
U.S. at 162-63, 50 USPQ2d at 1936. The Supreme 
Court noted in Zurko III, however, that this 
generally recognized difference is "a subtle one," so 
fine that in its review of case law in the Zurko III 
decision, the Court could not find any other case 
where a reviewing court had conceded that the 
standard of review made a difference. Id. Moreover, 
while appellate courts must respect agency 
expertise, the Court has "stressed the importance of 
not simply rubber-stamping agency fact finding." Id. 
(citing Universal Camera, 340 U.S. at 477-78). 
Indeed, the Court observed that Federal Circuit 
judges "will examine [Board fact] findings through 
the lens of patent-related experience — and properly 
so, for the Federal Circuit is a specialized Court." Id. 
The Court further noted that this "comparative 
expertise, by enabling the Circuit better to 
understand the basis for the [Board's] finding of 
fact, may play a more important role in assuring 
proper review than would a theoretically somewhat 
stricter standard." Id. 

With this guidance from the Supreme Court in 
mind, we now reconsider the Board's decision. 
Applicants urge that we reaffirm our conclusion in 
Zurko I, alleging numerous legal and factual errors 
in the Board decision. These arguments center 
around two issues. First, applicants argue that the 
prior art relied upon by the Board does not disclose 
one of the limitations of their claimed invention, 
namely communication between a trusted 
environment and the user along a trusted path. 
Second, applicants claim that there is no substantial 
evidence support for the Board's finding of 
motivation to combine the cited references to yield 
the claimed invention. We only need to consider the 
first issue raised by applicants. 

As to this first issue, the Commissioner 
apparently concedes that neither the UNIX IDS 
disclosure nor FILER2 teaches communications 
between the user and the trusted environment 
along a trusted path. Nevertheless, the 
Commissioner maintains that the Board's findings 
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concerning the content of the prior art are 
supported by four other references in the record. 
[FN1][1] As to this first issue, the Commissioner 
apparently concedes that neither the UNIX IDS 
disclosure nor FILER2 teaches communications 
between the user and the trusted environment 
along a trusted path. Nevertheless, the 
Commissioner maintains that the Board's findings 
concerning the content of the prior art are 
supported by four other references in the record. 
[FN1] The Commissioner argues that these 
additional references describe modified UNIX 
systems that allow communication over both 
trusted and untrusted paths. Therefore, the 
Commissioner argues, the Board's general 
findings concerning the content of the prior art 
have substantial evidence support, as does its 
ultimate conclusion of obviousness. 

We are unpersuaded by the Commissioner's 
arguments. The Board's conclusion of obviousness 
was based on the UNIX and FILER2 references. 
The Board's findings with respect to these 
references simply cannot be supported by the 
alternative references identified by the 
Commissioner on remand. To the contrary, these 
alternative references merely confirm the 
well-known fact that conventional UNIX systems 
do not allow communication between the user and 
the trusted environment along a trusted path. For 
example, Johrie et al., U.S. Pat. No. 4,918,653, 
comments that "[s]ome examples of prior art 
multi-user operating systems which have not 
provided an effective mechanism for establishing a 
trusted path include UNIX . . .." Johrie, col. 1, II. 
60-63. 

The Commissioner also cannot now mend the 
Board's faulty conclusion of obviousness by 
substituting these alternative references for those 
relied upon by the Board. This new combination of 
references would constitute a new ground for 
rejection, not considered or relied upon by the 
Examiner or the Board. It is well settled that it 
would be inappropriate for us to consider such a 
new ground of rejection. In re Margolis, 785 F.2d 
1029, 1032; 228 USPQ 940, 942 (Fed. Cir. 1986); 
see also Koyo Seiko Co. y Ltd. v. United States, 95 



F.3d 1094, 1099 (Fed. Cir. 1996) (holding that 
"[t]he grounds upon which an administrative order 
must be judged are those upon which the record 
discloses that its action was based.") (quoting SEC 
v. Chenery Corp., 318 U.S. 80, 87 (1943)). 

Finally, the deficiencies of the cited references 
cannot be remedied by the Board's general 
conclusions about what is "basic knowledge" or 
"common sense" to one of ordinary skill in the art. 
As described above, the Board contended that even 
if the cited UNIX and FILER2 references did not 
disclose a trusted path, "it is basic knowledge that 
communication in trusted environments is 
performed over trusted paths" and, moreover, 
verifying the trusted command in UNIX over a 
trusted path is "nothing more than good common 
sense." Ex parte Zurko, slip op. at 8. We cannot 
accept these findings by the Board. This assessment 
of basic knowledge and common sense was not 
based on any evidence in the record and, therefore, 
lacks substantial evidence support. As an 
administrative tribunal, the Board clearly has 
expertise in the subject matter over which it 
exercises jurisdiction. This expertise may provide 
sufficient support for conclusions as to peripheral 
issues. With respect to core factual findings in a 
determination of patentability, however, the Board 
cannot simply reach conclusions based on its own 
understanding or experience - or on its assessment 
of what would be basic knowledge or common 
sense. Rather, the Board must point to some 
concrete evidence in the record in support of these 
findings. [FN2] To hold otherwise would render the 
process of appellate review for substantial evidence 
on the record a meaningless exercise. Baltimore & 
Ohio R.R. Co. v. Aderdeen & Rockfish R.R. Co., 
393 U.S. 87, 91-92 (1968) (rejecting a 
determination of the Interstate Commerce 
Commission with no support in the record, noting 
that if the Court were to conclude otherwise "[t]he 
requirement for administrative decisions based on 
substantial evidence and reasoned findings — which 
alone make effective judicial review *1698 possible 
- would become lost in the haze of so-called 
expertise"). Accordingly, we cannot accept the 
Board's unsupported assessment of the prior art. 
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CONCLUSION 
The Board's conclusion of obviousness was based 
on a misreading of the references relied upon and, 
therefore, lacks substantial evidence support. 
Accordingly, the Board's judgment is reversed. 

REVERSED. 

FN1. Specifically, the Commissioner 
points to Johrie et al, U.S. Pat. No. 
4,918,653; E.J. McCauley et al., KSOS: 
The Design of a Secure Operating System, 
Ford Aerospace and Communications 
Corp. (1979); Stanley R. Ames, Jr. et al., 
Security Kernal Design and 
Implementation: An Introduction, IEEE 
Cat. No. 830700-001 (July 1983); and 
Simon Wiseman et al., The Trusted Path 
Between Smite and the User, Proceedings 
1988 IEEE Symposium on Security and 
Privacy (April 18-21, 1988). 

FN2. As described above, we cannot 
accept the Commissioner's invitation to 
now search the record for references in 
support of the Board's general conclusions 
concerning the prior art. Even if any such 
references could support these 
conclusions, it would be inappropriate for 
us to consider references not relied upon 
by the Board. In re Margolis, 785 F.2d at 
1032; 228 USPQ at 942. 

C.A.Fed. 

59 U.S.P.Q.2D 1693 
END OF DOCUMENT 
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